pkgsrc-Changes-HG archive
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]
[pkgsrc/trunk]: pkgsrc/net/zeromq zeromq: updated to 4.3.1
details: https://anonhg.NetBSD.org/pkgsrc/rev/92e48f7c2127
branches: trunk
changeset: 391774:92e48f7c2127
user: adam <adam%pkgsrc.org@localhost>
date: Thu Feb 14 13:04:37 2019 +0000
description:
zeromq: updated to 4.3.1
0MQ version 4.3.1 stable:
* CVE-2019-6250: A vulnerability has been found that would allow attackers to
direct a peer to jump to and execute from an address indicated by the
attacker.
This issue has been present since v4.2.0. Older releases are not affected.
NOTE: The attacker needs to know in advance valid addresses in the peer's
memory to jump to, so measures like ASLR are effective mitigations.
NOTE: this attack can only take place after authentication, so peers behind
CURVE/GSSAPI are not vulnerable to unauthenticated attackers.
See https://github.com/zeromq/libzmq/issues/3351 for more details.
Thanks to Guido Vranken for uncovering the issue and providing the fix!
* Note for packagers: as pkg-config's Requires.private is now used to properly
propagate dependencies for static builds, the libzmq*-dev or zeromq-devel or
equivalent package should now depend on the libfoo-dev or foo-devel packages
of all the libraries that zmq is linked against, or pkg-config --libs libzmq
will fail due to missing dependencies on end users machines.
0MQ version 4.3.0 stable:
* The following DRAFT APIs have been marked as STABLE and will not change
anymore:
- ZMQ_MSG_T_SIZE context option (see doc/zmq_ctx_get.txt)
- ZMQ_THREAD_AFFINITY_CPU_ADD and ZMQ_THREAD_AFFINITY_CPU_REMOVE (Posix only)
context options, to add/remove CPUs to the affinity set of the I/O threads.
See doc/zmq_ctx_set.txt and doc/zmq_ctx_get.txt for details.
- ZMQ_THREAD_NAME_PREFIX (Posix only) context option, to add a specific
integer prefix to the background threads names, to easily identify them.
See doc/zmq_ctx_set.txt and doc/zmq_ctx_get.txt for details.
- ZMQ_GSSAPI_PRINCIPAL_NAMETYPE and ZMQ_GSSAPI_SERVICE_PRINCIPAL_NAMETYPE
socket options, for the corresponding GSSAPI features. Additional
definitions for principal name types:
- ZMQ_GSSAPI_NT_HOSTBASED
- ZMQ_GSSAPI_NT_USER_NAME
- ZMQ_GSSAPI_NT_KRB5_PRINCIPAL
See doc/zmq_gssapi.txt for details.
- ZMQ_BINDTODEVICE socket option (Linux only), which will bind the
socket(s) to the specified interface. Allows to use Linux VRF, see:
https://www.kernel.org/doc/Documentation/networking/vrf.txt
NOTE: requires the program to be ran as root OR with CAP_NET_RAW
- zmq_timers_* APIs. These functions can be used for cross-platforms timed
callbacks. See doc/zmq_timers.txt for details.
- The following socket monitor events:
- ZMQ_EVENT_HANDSHAKE_FAILED_NO_DETAIL: unknown errors during handshake.
- ZMQ_EVENT_HANDSHAKE_SUCCEEDED: Handshake completed with authentication.
- ZMQ_EVENT_HANDSHAKE_FAILED_PROTOCOL: Protocol errors with peers or ZAP.
- ZMQ_EVENT_HANDSHAKE_FAILED_AUTH: Failed authentication requests.
See doc/zmq_socket_monitor.txt for more details and error codes.
- zmq_stopwatch_intermediate which returns the time elapsed without stopping
the stopwatch.
- zmq_proxy_steerable command 'STATISTICS' to retrieve stats about the amount
of messages and bytes sent and received by the proxy.
See doc/zmq_proxy_steerable.txt for more information.
* The build-time configuration option to select the poller has been split, and
new API_POLLER (CMake) and --with-api-poller (autoconf) options will now
determine what system call is used to implement the zmq_poll/zmq_poller APIs.
The previous POLLER and --with-poller options now only affects the
internal I/O thread. In case API_POLLER is not specified, the behaviour keeps
backward compatibility intact and will be the same as with previous releases.
* The non-default "poll" poller for the internal I/O thread (note: NOT for the
zmq_poll/zmq_poller user APIs!) has been disabled on Windows as WSAPoll does
not report connection failures. For more information see:
- https://daniel.haxx.se/blog/2012/10/10/wsapoll-is-broken/
- https://curl.haxx.se/mail/lib-2012-10/0038.html
- https://bugs.python.org/issue16507
* New epoll implementation for Windows, using the following implementation:
https://github.com/piscisaureus/wepoll/tree/v1.5.4
To use this, select "epoll" as the poller option in the build system.
Note for distributors: the wepoll source code is embedded and distributed.
It is licensed under the BSD-2-Clause and thus it is compatible with LGPL-3.0.
Note that, if selected at build time, the license text must be distributed
with the binary in accordance to the license terms. A copy can be found at:
external/wepoll/license.txt
* The pre-made Visual Studio solutions file are deprecated, and users are
encouraged to use the CMake solution generation feature instead.
* New DRAFT (see NEWS for 4.2.0) socket options:
- ZMQ_ROUTER_NOTIFY to deliver a notification when a peer connects and/or
disconnects in the form of a routing id plus a zero-length frame.
- ZMQ_MULTICAST_LOOP to control whether the data sent should be looped back
on local listening sockets for UDP multicast sockets (ZMQ_RADIO).
See doc/zmq_setsockopt.txt and doc/zmq_getsockopt.txt for details.
* New perf tool, perf/benchmark_radix_tree, to measure the performance of the
different internal implementations of the trie algorithm used to track
subscriptions. Requires a compiler that supports C++11.
* New autoconf flag "--enable-force-CXX98-compat" which will force -std=gnu++98
and, if the compiler supports them (clang++ at the moment), it will also add
-Wc++98-compat -Wc++98-compat-pedantic so that compatibility with C++98 can
be tested.
* Many, many coding style, duplication and static analysis improvements.
* Many, many improvements to the CMake build system, especially on Windows.
* Many, many improvements to unit tests.
diffstat:
net/zeromq/Makefile | 4 +-
net/zeromq/PLIST | 4 +-
net/zeromq/distinfo | 14 ++++----
net/zeromq/patches/patch-configure | 42 +++++++++++++++++++++++--
net/zeromq/patches/patch-src_tcp__listener.cpp | 16 +++++----
5 files changed, 59 insertions(+), 21 deletions(-)
diffs (152 lines):
diff -r 156adbb3d9b5 -r 92e48f7c2127 net/zeromq/Makefile
--- a/net/zeromq/Makefile Thu Feb 14 12:56:38 2019 +0000
+++ b/net/zeromq/Makefile Thu Feb 14 13:04:37 2019 +0000
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.29 2018/07/14 18:19:16 adam Exp $
+# $NetBSD: Makefile,v 1.30 2019/02/14 13:04:37 adam Exp $
-DISTNAME= zeromq-4.2.5
+DISTNAME= zeromq-4.3.1
CATEGORIES= net devel
MASTER_SITES= ${MASTER_SITE_GITHUB:=zeromq/}
GITHUB_PROJECT= libzmq
diff -r 156adbb3d9b5 -r 92e48f7c2127 net/zeromq/PLIST
--- a/net/zeromq/PLIST Thu Feb 14 12:56:38 2019 +0000
+++ b/net/zeromq/PLIST Thu Feb 14 13:04:37 2019 +0000
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.8 2018/01/13 18:22:42 adam Exp $
+@comment $NetBSD: PLIST,v 1.9 2019/02/14 13:04:37 adam Exp $
bin/curve_keygen
include/zmq.h
include/zmq_utils.h
@@ -41,6 +41,7 @@
man/man3/zmq_msg_set_routing_id.3
man/man3/zmq_msg_size.3
man/man3/zmq_poll.3
+man/man3/zmq_poller.3
man/man3/zmq_proxy.3
man/man3/zmq_proxy_steerable.3
man/man3/zmq_recv.3
@@ -52,6 +53,7 @@
man/man3/zmq_socket.3
man/man3/zmq_socket_monitor.3
man/man3/zmq_strerror.3
+man/man3/zmq_timers.3
man/man3/zmq_unbind.3
man/man3/zmq_version.3
man/man3/zmq_z85_decode.3
diff -r 156adbb3d9b5 -r 92e48f7c2127 net/zeromq/distinfo
--- a/net/zeromq/distinfo Thu Feb 14 12:56:38 2019 +0000
+++ b/net/zeromq/distinfo Thu Feb 14 13:04:37 2019 +0000
@@ -1,9 +1,9 @@
-$NetBSD: distinfo,v 1.27 2018/07/14 18:19:16 adam Exp $
+$NetBSD: distinfo,v 1.28 2019/02/14 13:04:37 adam Exp $
-SHA1 (zeromq-4.2.5.tar.gz) = 1132f839d703486c4ee1cf22f056585dfbb329c2
-RMD160 (zeromq-4.2.5.tar.gz) = 3b1348e904f2055becc833a9c7b3a12a455e5443
-SHA512 (zeromq-4.2.5.tar.gz) = 4556cb50d05a6d133015a0ba804d6d951a47479a33fa29561eaeecb93d48b7bb6477365d0986c38b779f500cadaf08522c4a7aa13f5510303bd923f794d37036
-Size (zeromq-4.2.5.tar.gz) = 1409447 bytes
-SHA1 (patch-configure) = c6b5ab95dc022525b8af92756c5c1ee9dc3656e0
+SHA1 (zeromq-4.3.1.tar.gz) = 6cce22d830eaf95feff7cab00744df13ad7ab7f3
+RMD160 (zeromq-4.3.1.tar.gz) = 43e14ed3c0ca6f7de39cbc74f206e700bb469c39
+SHA512 (zeromq-4.3.1.tar.gz) = b80388a3703993425cdd73054139a8e2895aedb9992ea68d6eadb4ea39b9af576ea14f306dfb432e4c24535feb6b293f82fac5679b655d258f0f921f2b71e772
+Size (zeromq-4.3.1.tar.gz) = 1490122 bytes
+SHA1 (patch-configure) = b0e3d865b3eddf93461aff6674a64c7cc9fc1f01
SHA1 (patch-src_ipc__listener.cpp) = fdaa86b9c13b5c3f7e9dff3934085a4138fac279
-SHA1 (patch-src_tcp__listener.cpp) = d91f06b69a650f74084bb4a0106d7fc0a8387107
+SHA1 (patch-src_tcp__listener.cpp) = e09f1df0f1c117a317a8a731404daf84f2996700
diff -r 156adbb3d9b5 -r 92e48f7c2127 net/zeromq/patches/patch-configure
--- a/net/zeromq/patches/patch-configure Thu Feb 14 12:56:38 2019 +0000
+++ b/net/zeromq/patches/patch-configure Thu Feb 14 13:04:37 2019 +0000
@@ -1,10 +1,10 @@
-$NetBSD: patch-configure,v 1.6 2018/01/13 18:22:42 adam Exp $
+$NetBSD: patch-configure,v 1.7 2019/02/14 13:04:37 adam Exp $
Portability fixes.
---- configure.orig 2017-12-13 13:37:25.000000000 +0000
+--- configure.orig 2019-01-12 16:18:01.000000000 +0000
+++ configure
-@@ -19007,7 +19007,7 @@ if test "${enable_address_sanitizer+set}
+@@ -19450,7 +19450,7 @@ if test "${enable_address_sanitizer+set}
fi
@@ -13,7 +13,7 @@
CFLAGS="${CFLAGS} -fsanitize=address"
CXXFLAGS="${CXXFLAGS} -fsanitize=address"
-@@ -20448,12 +20448,12 @@ if test "${with_poller+set}" = set; then
+@@ -20853,12 +20853,12 @@ if test "${with_api_poller+set}" = set;
fi
@@ -28,3 +28,37 @@
# We search for pollers in this order
pollers="kqueue epoll devpoll pollset poll select"
fi
+@@ -21297,13 +21297,13 @@ $as_echo "#define ZMQ_IOTHREAD_POLLER_US
+ if test $poller_found -eq 0; then
+ as_fn_error $? "None of '$pollers' are valid pollers on this platform" "$LINENO" 5
+ fi
+- if test "x$with_api_poller" == "x"; then
++ if test "x$with_api_poller" = "x"; then
+ with_api_poller=auto
+ fi
+- if test "x$with_api_poller" == "xauto"; then
+- if test $poller == "select"; then
++ if test "x$with_api_poller" = "xauto"; then
++ if test $poller = "select"; then
+ api_poller=select
+- elif test $poller == "wepoll"; then
++ elif test $poller = "wepoll"; then
+ api_poller=select
+ else
+ api_poller=poll
+@@ -21311,13 +21311,13 @@ $as_echo "#define ZMQ_IOTHREAD_POLLER_US
+ else
+ api_poller=$with_api_poller
+ fi
+- if test "$api_poller" == "select"; then
++ if test "$api_poller" = "select"; then
+ { $as_echo "$as_me:${as_lineno-$LINENO}: Using 'select' zmq_poll(er)_* API polling system" >&5
+ $as_echo "$as_me: Using 'select' zmq_poll(er)_* API polling system" >&6;}
+
+ $as_echo "#define ZMQ_POLL_BASED_ON_SELECT 1" >>confdefs.h
+
+- elif test "$api_poller" == "poll"; then
++ elif test "$api_poller" = "poll"; then
+ { $as_echo "$as_me:${as_lineno-$LINENO}: Using 'poll' zmq_poll(er)_* API polling system" >&5
+ $as_echo "$as_me: Using 'poll' zmq_poll(er)_* API polling system" >&6;}
+
diff -r 156adbb3d9b5 -r 92e48f7c2127 net/zeromq/patches/patch-src_tcp__listener.cpp
--- a/net/zeromq/patches/patch-src_tcp__listener.cpp Thu Feb 14 12:56:38 2019 +0000
+++ b/net/zeromq/patches/patch-src_tcp__listener.cpp Thu Feb 14 13:04:37 2019 +0000
@@ -1,18 +1,20 @@
-$NetBSD: patch-src_tcp__listener.cpp,v 1.3 2018/01/13 18:22:42 adam Exp $
+$NetBSD: patch-src_tcp__listener.cpp,v 1.4 2019/02/14 13:04:37 adam Exp $
NetBSD<8 has SOCK_CLOEXEC, but uses it with paccept, not accept4
---- src/tcp_listener.cpp.orig 2017-12-13 13:37:08.000000000 +0000
+--- src/tcp_listener.cpp.orig 2019-01-12 16:17:39.000000000 +0000
+++ src/tcp_listener.cpp
-@@ -282,7 +282,11 @@ zmq::fd_t zmq::tcp_listener_t::accept ()
+@@ -291,8 +291,13 @@ zmq::fd_t zmq::tcp_listener_t::accept ()
socklen_t ss_len = sizeof (ss);
#endif
#if defined ZMQ_HAVE_SOCK_CLOEXEC && defined HAVE_ACCEPT4
+#if defined(__NetBSD__)
-+ fd_t sock = ::paccept (s, (struct sockaddr *) &ss, &ss_len, NULL, SOCK_CLOEXEC);
++ fd_t sock = ::paccept (_s, reinterpret_cast<struct sockaddr *> (&ss),
++ &ss_len, NULL, SOCK_CLOEXEC);
+#else
- fd_t sock = ::accept4 (s, (struct sockaddr *) &ss, &ss_len, SOCK_CLOEXEC);
+ fd_t sock = ::accept4 (_s, reinterpret_cast<struct sockaddr *> (&ss),
+ &ss_len, SOCK_CLOEXEC);
+#endif
#else
- fd_t sock = ::accept (s, (struct sockaddr *) &ss, &ss_len);
- #endif
+ fd_t sock =
+ ::accept (_s, reinterpret_cast<struct sockaddr *> (&ss), &ss_len);
Home |
Main Index |
Thread Index |
Old Index